Wow, Gabe! While the might solve the
problem, that’s about the scariest most convoluted key management system
I’ve ever heard! Too many keys to lose for my tastes.
I have to say it again. Wow.
I think the fumes from the coke plants in
Philly have gotten to your brain, dude. ;)
(For those playing at home, that’s coal
or petroleum coke (see http://en.wikipedia.org/wiki/Coke_(fuel)),
and http://en.wikipedia.org/wiki/Petroleum_coke)
not Cocaine or Coca-Cola, OK?)
________________________________________________________
Curtis Preston | VP
Data Protection
GlassHouse Technologies, Inc.
T: +1 760 710 2004 | C: +1 760 419 5838 | F: +1 760 710 2009
cpreston AT glasshouse DOT com | www.glasshouse.com
Infrastructure :: Optimized
From:
veritas-bu-bounces AT mailman.eng.auburn DOT edu
[mailto:veritas-bu-bounces AT mailman.eng.auburn DOT edu] On Behalf Of Rosenkoetter, Gabriel
Sent: Thursday, July 31, 2008 5:45
AM
To: ken_zufall AT goodyear DOT com;
veritas-BU
Subject: Re: [Veritas-bu] Disable
alternate client restores
Enable client-side encryption (and compression) for all
clients. Create a unique key on each client, and make the administrator(s) of
that client responsible for maintaining their key (and a backup at least of its
passphrase through ANOTHER means). Exclude the key data from backups.
All of those are client-side configurations.
--
gabriel rosenkoetter
Radian Group Inc, Unix/Linux/VMware Sysadmin / Backup & Recovery
gabriel.rosenkoetter AT radian DOT biz, 215 231 1556
From:
ken_zufall AT goodyear DOT com [mailto:ken_zufall AT goodyear DOT com]
Sent: Wednesday, July 30, 2008
6:38 PM
To: veritas-BU
Subject: [Veritas-bu] Disable
alternate client restores
Running 6.5.1, have been asked if it's possible to
restrict the Master server from restoring a particular client's images to
alternate clients. I know we can restrict one client from restoring
another client's data; I know I can prevent the Master from writing to a
particular client. What I haven't been able to determine is if I can keep
the Master from writing clientA's data to clientB.
Thanks,
Ken
Zufall
Technical Analyst
D660C
The Goodyear Tire & Rubber Company